@tc-libs/authentication 1.30.0 → 3.0.0

package/package.json

@@ -1,9 +1,19 @@
 {
   "name": "@tc-libs/authentication",
-  "version": "1.30.0",
+  "version": "3.0.0",
   "dependencies": {
-    "@tc-libs/errors": "1.30.0",
-    "@tc-libs/helper": "1.30.0"
+    "@tc-libs/errors": "3.0.0",
+    "@tc-libs/helper": "3.0.0",
+    "@nestjs/common": "^11.0.12",
+    "@nestjs/passport": "^11.0.5",
+    "@nestjs/jwt": "^11.0.0",
+    "passport-apple": "^2.0.2",
+    "rxjs": "^7.8.2",
+    "passport-google-oauth20": "^2.0.0",
+    "passport-jwt": "^4.0.1",
+    "@nestjs/core": "^11.0.12",
+    "lodash": "^4.17.21",
+    "tslib": "^2.8.1"
   },
   "type": "commonjs",
   "main": "./src/index.js",

package/src/decorators/auth.combined.decorator.d.ts

@@ -1,2 +1,3 @@
 export declare function AuthCombinedPublicAccessClassProtected(): ClassDecorator;
+export declare function AuthCombinedAccessClassProtected(roles: string[]): ClassDecorator;
 export declare function AuthCombinedAdminAccessClassProtected(): ClassDecorator;

package/src/decorators/auth.combined.decorator.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthCombinedPublicAccessClassProtected = AuthCombinedPublicAccessClassProtected;
+exports.AuthCombinedAccessClassProtected = AuthCombinedAccessClassProtected;
 exports.AuthCombinedAdminAccessClassProtected = AuthCombinedAdminAccessClassProtected;
 const common_1 = require("@nestjs/common");
 const auth_constant_1 = require("../constants/auth.constant");
@@ -14,14 +15,18 @@ function AuthCombinedPublicAccessClassProtected() {
         (0, common_1.SetMetadata)(auth_constant_1.AUTH_ACCESS_FOR_META_KEY, [auth_enum_constant_1.ENUM_AUTH_ACCESS_FOR.USER])(constructor);
     };
 }
+function AuthCombinedAccessClassProtected(roles) {
+    return function (constructor) {
+        // Applica UseGuards e SetMetadata a livello di classe
+        (0, common_1.UseGuards)(auth_combined_guard_1.CombinedAuthGuard, auth_payload_access_for_guard_1.AuthPayloadAccessForGuard)(constructor);
+        (0, common_1.SetMetadata)(auth_constant_1.AUTH_ACCESS_FOR_META_KEY, roles)(constructor);
+    };
+}
 function AuthCombinedAdminAccessClassProtected() {
     return function (constructor) {
         // Applica UseGuards e SetMetadata a livello di classe
         (0, common_1.UseGuards)(auth_combined_guard_1.CombinedAuthGuard, auth_payload_access_for_guard_1.AuthPayloadAccessForGuard)(constructor);
-        (0, common_1.SetMetadata)(auth_constant_1.AUTH_ACCESS_FOR_META_KEY, [
-            auth_enum_constant_1.ENUM_AUTH_ACCESS_FOR.SUPER_ADMIN,
-            auth_enum_constant_1.ENUM_AUTH_ACCESS_FOR.ADMIN,
-        ])(constructor);
+        (0, common_1.SetMetadata)(auth_constant_1.AUTH_ACCESS_FOR_META_KEY, [auth_enum_constant_1.ENUM_AUTH_ACCESS_FOR.ADMIN])(constructor);
     };
 }
 //# sourceMappingURL=auth.combined.decorator.js.map

package/src/decorators/auth.combined.decorator.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.combined.decorator.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/decorators/auth.combined.decorator.ts"],"names":[],"mappings":";;AAMA,wFAQC;AAED,sFASC;AAzBD,2CAAwD;AACxD,8DAAsE;AACtE,wEAAuE;AACvE,gFAA2E;AAC3E,mGAA4F;AAE5F,SAAgB,sCAAsC;IACpD,OAAO,UAAU,WAAgB;QAC/B,sDAAsD;QACtD,IAAA,kBAAS,EAAC,uCAAiB,EAAE,yDAAyB,CAAC,CAAC,WAAW,CAAC,CAAC;QACrE,IAAA,oBAAW,EAAC,wCAAwB,EAAE,CAAC,yCAAoB,CAAC,IAAI,CAAC,CAAC,CAChE,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,qCAAqC;IACnD,OAAO,UAAU,WAAgB;QAC/B,sDAAsD;QACtD,IAAA,kBAAS,EAAC,uCAAiB,EAAE,yDAAyB,CAAC,CAAC,WAAW,CAAC,CAAC;QACrE,IAAA,oBAAW,EAAC,wCAAwB,EAAE;YACpC,yCAAoB,CAAC,WAAW;YAChC,yCAAoB,CAAC,KAAK;SAC3B,CAAC,CAAC,WAAW,CAAC,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"auth.combined.decorator.js","sourceRoot":"","sources":["../../../../../packages/authentication/src/decorators/auth.combined.decorator.ts"],"names":[],"mappings":";;AAMA,wFAQC;AAED,4EAQC;AAED,sFAQC;AAlCD,2CAAwD;AACxD,8DAAsE;AACtE,wEAAuE;AACvE,gFAA2E;AAC3E,mGAA4F;AAE5F,SAAgB,sCAAsC;IACpD,OAAO,UAAU,WAAgB;QAC/B,sDAAsD;QACtD,IAAA,kBAAS,EAAC,uCAAiB,EAAE,yDAAyB,CAAC,CAAC,WAAW,CAAC,CAAC;QACrE,IAAA,oBAAW,EAAC,wCAAwB,EAAE,CAAC,yCAAoB,CAAC,IAAI,CAAC,CAAC,CAChE,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAC9C,KAAe;IAEf,OAAO,UAAU,WAAgB;QAC/B,sDAAsD;QACtD,IAAA,kBAAS,EAAC,uCAAiB,EAAE,yDAAyB,CAAC,CAAC,WAAW,CAAC,CAAC;QACrE,IAAA,oBAAW,EAAC,wCAAwB,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,qCAAqC;IACnD,OAAO,UAAU,WAAgB;QAC/B,sDAAsD;QACtD,IAAA,kBAAS,EAAC,uCAAiB,EAAE,yDAAyB,CAAC,CAAC,WAAW,CAAC,CAAC;QACrE,IAAA,oBAAW,EAAC,wCAAwB,EAAE,CAAC,yCAAoB,CAAC,KAAK,CAAC,CAAC,CACjE,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/src/guards/payload/auth.payload.access-for.guard.d.ts

@@ -3,5 +3,9 @@ import { Reflector } from '@nestjs/core';
 export declare class AuthPayloadAccessForGuard implements CanActivate {
     private readonly reflector;
     constructor(reflector: Reflector);
+    /**
+     * Validate whether the current authenticated user can access
+     * a route based on the required access scope metadata.
+     */
     canActivate(context: ExecutionContext): Promise<boolean>;
 }

package/src/guards/payload/auth.payload.access-for.guard.js

@@ -11,17 +11,27 @@ let AuthPayloadAccessForGuard = class AuthPayloadAccessForGuard {
     constructor(reflector) {
         this.reflector = reflector;
     }
+    /**
+     * Validate whether the current authenticated user can access
+     * a route based on the required access scope metadata.
+     */
     async canActivate(context) {
+        // Read required access scopes from handler/class metadata.
         const requiredFor = this.reflector.getAllAndOverride(constants_1.AUTH_ACCESS_FOR_META_KEY, [context.getHandler(), context.getClass()]);
+        // Extract current user's scope from request payload.
         const { user } = context.switchToHttp().getRequest();
         const { accessFor } = user;
+        // Allow if no scope is required or user is super admin.
         if (!requiredFor || accessFor === constants_1.ENUM_AUTH_ACCESS_FOR.SUPER_ADMIN) {
             return true;
         }
+        // Check whether user's scope matches one of required scopes.
         const hasFor = (0, lodash_1.includes)(requiredFor, accessFor);
+        // Deny with specific access-for error when scope does not match.
         if (!hasFor) {
             throw new errors_1.Api403AccessForError({ accessFor: accessFor });
         }
+        // Access granted.
         return true;
     }
 };

package/src/guards/payload/auth.payload.access-for.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.payload.access-for.guard.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/payload/auth.payload.access-for.guard.ts"],"names":[],"mappings":";;;;AAAA,4CAAuD;AACvD,+CAGyB;AACzB,2CAA2E;AAC3E,uCAAyC;AACzC,mCAAkC;AAG3B,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACpC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,WAAW,GACf,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC9B,oCAAwB,EACxB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEJ,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE3B,IAAI,CAAC,WAAW,IAAI,SAAS,KAAK,gCAAoB,CAAC,WAAW,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAY,IAAA,iBAAQ,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEzD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,6BAAoB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAxBY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;6CAE6B,gBAAS;GADtC,yBAAyB,CAwBrC"}
+{"version":3,"file":"auth.payload.access-for.guard.js","sourceRoot":"","sources":["../../../../../../packages/authentication/src/guards/payload/auth.payload.access-for.guard.ts"],"names":[],"mappings":";;;;AAAA,4CAAuD;AACvD,+CAGyB;AACzB,2CAA2E;AAC3E,uCAAyC;AACzC,mCAAkC;AAG3B,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACpC,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,2DAA2D;QAC3D,MAAM,WAAW,GACf,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAC9B,oCAAwB,EACxB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEJ,qDAAqD;QACrD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE3B,wDAAwD;QACxD,IAAI,CAAC,WAAW,IAAI,SAAS,KAAK,gCAAoB,CAAC,WAAW,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6DAA6D;QAC7D,MAAM,MAAM,GAAY,IAAA,iBAAQ,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEzD,iEAAiE;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,6BAAoB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,kBAAkB;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAnCY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;6CAE6B,gBAAS;GADtC,yBAAyB,CAmCrC"}